Overview

overview

7

Static

static

E-Card_zu_...10.exe

windows7-x64

7

E-Card_zu_...10.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c869b067c41ede90dbc388ec2bc51f3477a5be3957aca70b5d10ad146fb6b78

  • Size

    120KB

  • Sample

    221124-elfzesfh58

  • MD5

    98a3545520e1473e729abc7f361ff8ec

  • SHA1

    9bb8ecec993e87b25c9676d6fe73a9b7862a5b93

  • SHA256

    4c869b067c41ede90dbc388ec2bc51f3477a5be3957aca70b5d10ad146fb6b78

  • SHA512

    d5ee8241e4b4f561bfed99da9a78d3495de657a41db4df9ebab67a5b49113162d56ec5a34899887ba141e86a0bf5db3943bf063eee12a4bc994659f0a3849092

  • SSDEEP

    3072:+cJI0yFktepDlXFQuYlgSLLPr6s6THp6YF/xUhlz8k2ck56:+oisaQuYumqJ6Hhx8tch

Score
7/10
persistence

Malware Config

Targets

    • Target

      E-Card_zu_Weichnachten_scan_foto_2834792347_12_2014_21093812_000129_001_004_002910.exe

    • Size

      148KB

    • MD5

      bb6eaa3caf122030e276ddb20790e5e5

    • SHA1

      050019c2864790aa5f0ac4fa6d2e1a65eb59cd70

    • SHA256

      bba5332c6f0d44bc3f2935842dfbcc051f3edb1b7f186a94c665271ccca13755

    • SHA512

      1290ae818f8a64288848fd6fc1e721edb96b4cd5b0991b1f7d10602198ddefdfcdd1f8b3b7610594432581752f14cc60514cd57930c636a4b8a714a18f7d4d7d

    • SSDEEP

      3072:cIjIB3k5uMfRUL9glXFQuMlgSLLPr6s6THgFWP27:n/uUa+QuMumqAFWP6

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks